Storia in 3 fonti

26,000 Agents Fooled by a Fake Skill

Security scanners only check what's in the package. Malicious actors are exploiting that narrow view with mutable external links that change after approval—and a single fake skill already reached 26,000 agents before anyone noticed.

Raccontata da

dev.to

thehackernews.com

thenextweb.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

thenextweb.com1 mese fa

A fake AI agent skill passed every security scanner and reportedly reached 26,000 agents

Security firm AIR built a harmless fake skill, got it past Cisco and NVIDIA scanners, and says it reached 26,000 agents, exposing a blind spot in how skills are vetted.

Leggi questa versione → originale

thehackernews.com1 mese fa

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

AIR's fake skill reached 26,000 agents by bypassing security scanners, then modifying external content after approval—proving scanners only vet the submitted package. Managers must vet skill sources, assume external URLs change post-deployment, and enforce least privilege.

Leggi questa versione → originale

Timeline cronologica

martedì 23 giugno 2026·dev.to
We security-graded 117,854 AI agent skills. Here's what we found.
Only 17.7% of the catalog is popular enough to be graded, 1 in 32 graded skills is unsafe, and the...
martedì 23 giugno 2026·thehackernews.com
Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
AIR says its fake AI skill passed scanner checks by using a mutable external link, exposing a blind spot in agent skill vetting.

A fake AI agent skill passed every security scanner and reportedly reached 26,000 agents

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Timeline cronologica

We security-graded 117,854 AI agent skills. Here's what we found.

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

We security-graded 117,854 AI agent skills. Here's what we found.

A fake AI agent skill passed every security scanner and reportedly reached 26,000 agents

Fake AI Agent Skill Slipped Past Every Scanner and Reached 26,000 Agents

26,000 Agents Fooled by a Fake Skill